AI Reviewer Template: ISO 27001 ISMS Reviewer

A compliance reviewer for organisations implementing or maintaining an Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022. This reviewer evaluates ISMS documentation including the information security policy, risk assessment methodology, Statement of Applicability, risk treatment plans, and Annex A control documentation. It checks for compliance with all mandatory clauses (4-10) and evaluates the documentation of selected Annex A controls. The reviewer flags common certification audit nonconformities including incomplete risk assessment documentation, misalignment between risk treatment and the Statement of Applicability, inadequate management review records, and missing internal audit procedures. With the transition from ISO 27001:2013 to ISO 27001:2022, the reviewer also checks for updated control categories and new controls introduced in the 2022 revision.